Welcome to Monday everyone!
We're busily getting ready for our final session in the series tomorrow, where we'll be running through a live threat hunt with all of you. Can't wait to get started with it - should be fun 
Don't forget to review the excellent Threat Hunting Framework document that Andrew posted last week here - https://community.sophos.com/intercept-x-endpoint/b/threat-hunting-academy/posts/sophos-edr-threat-hunting-framework. It'll be really helpful both for tomorrow and in your general threat hunting life.
And also, if you have a second screen/device that you can access the Slido tool on for interacting with the session, make sure you have it available tomorrow.
Look forward to seeing you all there!
